Skip to content

Known vulnerabilities in HCL Software BigFix Patch Management Download Plug-ins

Is your version affected?

CVE Summary Score Published
CVE-2024-42187 BigFix Patch Download Plug-ins are affected by path traversal vulnerability 5.3 Medium Jan 23, 2025
CVE-2024-42186 BigFix Patch Download Plug-ins are affected by an insecure protocol support 2.8 Low Jan 23, 2025
CVE-2024-42185 BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks 2.5 Low Jan 23, 2025
CVE-2024-42184 BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme 2.5 Low Jan 23, 2025
CVE-2024-42183 BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability 2.5 Low Jan 23, 2025
CVE-2024-42182 BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability 2.5 Low Jan 23, 2025

Other HCL Software products